Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1384792a-12dd-37ad-8540-fb4264186bb3.roa
File:                     1384792a-12dd-37ad-8540-fb4264186bb3.roa (raw, json)
Hash identifier:          YFbuRFHBSUIKI44YDzYUTKc63n5r84W9zm1/TgOWuQI=
Subject key identifier:   A6:67:32:A9:3B:18:9B:EA:3B:E7:AD:50:0A:D9:2E:77:A2:FE:2A:FC
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7BBE49B057B5D418E97EC80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1384792a-12dd-37ad-8540-fb4264186bb3.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        64.233.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bb:e4:9b:05:7b:5d:41:8e:97:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=429d685b-5480-4538-ae78-d1f0fbfc877a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:56:ed:5a:4e:77:de:ed:4f:56:b6:16:ad:3e:
                    99:fe:52:d6:fd:f5:61:6a:ed:41:74:45:33:ca:71:
                    72:31:5e:06:70:ae:c8:f1:7a:7f:81:51:fe:cd:84:
                    f7:d4:1e:57:28:8e:d9:c0:68:5a:c9:6d:bf:81:59:
                    df:ff:c4:0d:3d:9c:1c:c7:73:1e:7c:c4:4f:fb:f5:
                    ba:9f:4e:7f:02:08:61:a0:40:50:06:02:31:85:40:
                    0b:8f:1d:b3:ba:79:3e:01:ee:b2:3a:e7:7d:4d:db:
                    a2:42:34:ce:14:86:ac:35:45:d7:06:c8:ac:f6:ea:
                    91:f4:86:d5:80:a3:37:11:69:d4:01:7c:84:1d:cd:
                    c0:13:18:0a:14:da:eb:3f:7b:e6:50:80:ab:3c:cb:
                    21:59:08:e9:09:36:a2:bd:74:12:7a:46:ab:f4:6d:
                    85:16:80:1f:b7:c2:b2:99:c5:43:f7:8d:c6:37:53:
                    5f:26:83:7e:70:ef:16:07:72:f9:5d:5d:45:41:0b:
                    51:72:6f:82:45:c0:e1:aa:22:70:8d:a5:06:a3:ef:
                    1a:c6:64:17:0c:d0:ee:02:0f:7f:b0:db:99:79:d8:
                    3a:5f:e5:bd:30:65:1b:5e:2b:87:63:30:3b:c6:b5:
                    30:e4:7d:28:16:96:5e:d6:d4:f7:9a:81:8b:7f:3a:
                    6c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:67:32:A9:3B:18:9B:EA:3B:E7:AD:50:0A:D9:2E:77:A2:FE:2A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1384792a-12dd-37ad-8540-fb4264186bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.233.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:cd:b2:1c:0e:f7:ca:46:80:aa:76:ec:9d:82:ce:bb:98:e8:
         f0:ab:3f:5c:0b:62:72:80:ab:e9:2e:b1:e5:84:7c:93:ad:0a:
         6f:46:6e:e6:db:ba:b0:42:72:2c:3d:01:ba:ca:68:ab:10:07:
         32:67:aa:0f:8b:78:7a:43:3b:a8:e1:17:e9:c5:cb:02:f9:58:
         8a:92:31:cd:a8:95:5a:49:a8:b8:9a:c9:3a:ec:ae:e4:af:e1:
         d0:98:6d:19:30:01:6d:3d:27:47:9e:ca:a9:fe:a7:6c:e1:68:
         0f:cd:42:b5:4e:e1:e5:0b:87:cf:58:0f:7a:42:03:8f:47:62:
         c7:1d:13:e3:2a:5f:22:ef:6a:77:32:72:d4:da:af:7a:89:ea:
         e1:ff:65:32:2d:7f:af:f5:01:14:05:74:bd:cd:29:39:ff:f3:
         36:a7:2d:e0:78:46:90:d2:21:57:9d:0f:75:4b:37:bc:48:99:
         2d:68:48:ec:a2:62:f4:c5:5d:2c:38:af:09:00:61:7c:85:50:
         49:9e:51:e7:ef:08:ad:4c:61:40:a5:2b:9d:50:13:b0:3d:d4:
         92:bd:24:02:b7:05:11:0e:fe:72:e1:1e:37:ef:f4:1c:9c:05:
         b9:0d:27:f1:3c:20:25:65:45:f2:10:81:d0:ac:e5:45:e0:4e:
         9f:05:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org